CVE-2026-58442
Received Received - Intake

Repository Migration SSRF via DNS Allow-List Bypass

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Gitea Limited

Description
Repository migration SSRF via multi-answer DNS allow-list bypass

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-58442
EUVD
EUVD-2026-58169

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gitea gitea to 1.26.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-58442 is a Server-Side Request Forgery (SSRF) vulnerability in Gitea's repository migration feature. It occurs when a migration hostname resolves to multiple IP addresses. The validation logic allows a hostname if any resolved IP is permitted, even if another resolved IP is internal or blocked. During the git clone operation, the hostname is resolved again, potentially connecting to an internal address that should be blocked.

Detection Guidance

To detect this SSRF vulnerability, monitor DNS resolution logs for repository migration requests resolving to multiple IPs. Check Gitea logs for migration operations using hostnames that resolve to both public and internal addresses. Look for git clone operations from unexpected internal sources.

Impact Analysis

An authenticated low-privilege user with repository migration permissions can exploit this by using a DNS name resolving to both a public and internal IP. This allows Gitea to connect to internal Git services and import their contents into an attacker-controlled repository, leading to unauthorized access to sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR (data protection) and HIPAA (health information privacy). Unauthorized data exposure risks regulatory penalties and breaches of confidentiality.

Mitigation Strategies

Upgrade Gitea to version 1.27.0 or later immediately. If upgrading is not possible, disable repository migration functionality or restrict migration permissions to trusted users only. Implement strict IP allow-lists and block all private/internal IP ranges.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58442. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart